Booking.com Detects and Contains Data Breach Involving Customer Reservation Details

com, a Dutch company, experienced a data breach in which hackers stole customer data including names, email addresses, phone numbers, and details about past and present bookings. Booking.com detected suspicious activity impacting some reservations and immediately contained the breach.

com updated Pins for reservations as part of its response. The company is sending emails to affected customers warning them of the heightened risk. com's systems.

Company Statements on Security and Scams Booking.

com stated that it will never ask guests to share credit card details by email, over the phone, Whatsapp or text, or ask guests to make a bank transfer that is different from the payment policy details in their booking confirmation. This guidance follows the detection of suspicious activity affecting reservations. com, according to multiple sources.

com has seen almost seven billion check-ins. The company operates as a Dutch entity. These figures provide context to the scale of data potentially involved in the breach.

Context of Reservation Hijack Scams Previous reservation hijacks involved hotels being hacked to access the hotel's Booking.

com account and send phishing emails and text messages. The BBC has reported on reservation hijack scams multiple times since March 2023. Reports indicate reservation hijack scams have led to financial losses for some users in recent years, often via third-party phishing.

This pattern of incidents highlights ongoing risks in the booking sector. com's recent breach aligns with these prior events by involving unauthorized access to reservation data. The company's notifications to customers aim to mitigate similar phishing attempts post-breach.